On 2015-06-26, David Dahlberg <david.dahlb...@fkie.fraunhofer.de> wrote: > Am Freitag, den 26.06.2015, 09:53 +0200 schrieb Peter J. Philipp: > >> I can't find the -3 - option to generate NSEC3 RR's with >> dnssec-signzone. Am I reading the manual page wrong or is this a >> missing feature? If it is I'll probably leave NSEC3 out. > > That's because old OpenBSD used an old version of ISC Bind (and thus an > old version of dnssec-tools).
If you still have /usr/sbin/dnssec-signzone and /usr/share/man/man8/dnssec-signzone.8 they are old files, dnssec-signzone was removed from base along with most of the rest of bind; only (old versions of) dig, host and nslookup remain.
